because they are already in test/tests/ and
test/tests/test_* just seems silly to me

and add test for it so it won't happen again

* warning_code was missing, and the fingerprint method on warning relies
on it always existing

We have warnings for use of constantize and for using
send/try/etc with user input for the method name.

and friends

which is a good thing

This is an enhancement and and a bug fix.  Models use polymorphic routes and should be considered safe as do arrays.  Treat arrays containing things other than models as unsafe as well.

Set ActiveSupport.escape_html_entities_in_json=true in versions >= 2.1.0 for autoescaping on a to_json call.